Depends on your threat model. Practically, the cloud admin would be able to dump that data in clear during processing even if that data is encrypted at rest and

Depends on your threat model. Practically, the cloud admin would be able to dump that data in clear during processing even if that data is encrypted at rest and in transit.